Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa
File:                     e7afb843-f085-3588-909c-5f913275b459.roa (raw, json)
Hash identifier:          ogXDDVG7Rm7YjW59idi6ps2xxauOBKFO18sL0PXyDPI=
Subject key identifier:   73:97:D6:8B:E5:49:D5:A9:5A:BA:B6:1D:1D:EB:13:1E:8D:F1:AB:F1
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F4328584CDDCCECDE84D3A11C6CB8F8C0
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     53454
IP address blocks:        192.223.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:ec:de:84:d3:a1:1c:6c:b8:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=42ea3058-5645-4629-88ef-43d703e7eb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e5:de:c9:ac:d4:46:1b:b8:4b:aa:31:96:86:
                    4a:0e:9a:c9:a1:e0:71:89:8f:f5:62:ed:ad:51:09:
                    9e:fb:9c:b5:4c:80:f1:03:9d:fd:a7:2c:b9:43:54:
                    9d:b2:5f:ef:7d:5a:79:ff:74:db:2a:65:35:31:95:
                    a8:66:bf:69:df:3c:b9:51:9d:cf:68:7c:1e:bf:e3:
                    f7:d9:fe:4a:0e:df:f1:b9:b3:9b:5e:17:14:98:b9:
                    32:03:53:67:72:6f:bc:a6:f4:73:55:ec:05:d1:a2:
                    03:eb:53:33:cf:9a:fe:50:b8:09:f8:83:84:db:74:
                    09:bc:47:f7:eb:24:2a:3c:a6:75:be:42:5f:70:f5:
                    e8:75:7e:8e:61:87:62:b7:4d:37:0c:d0:85:47:3e:
                    23:68:cf:14:54:88:fb:00:21:1c:0c:e4:d8:87:a3:
                    f9:95:f7:c8:37:e1:c3:25:f3:80:c8:3c:c9:8d:b2:
                    9f:ed:72:48:39:88:37:37:10:87:50:48:eb:33:95:
                    bf:0e:49:6c:1d:3b:52:10:90:49:2b:ca:c3:ef:44:
                    ad:a9:8f:3b:2d:17:7b:28:bd:e9:12:20:7c:be:18:
                    e8:3c:88:0c:ed:cd:c4:92:a8:ab:97:15:fc:fa:72:
                    27:7e:7b:c6:30:2a:db:46:09:3d:56:21:4d:df:2f:
                    de:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:97:D6:8B:E5:49:D5:A9:5A:BA:B6:1D:1D:EB:13:1E:8D:F1:AB:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:84:4f:bd:b4:c3:de:d9:88:d3:ea:18:68:4c:e6:d9:d6:
         95:c3:26:6f:52:80:12:8c:e7:07:1b:76:4e:94:05:a4:4f:3e:
         09:d3:bf:ac:60:ad:20:89:8f:68:19:3c:8c:58:01:0b:02:37:
         e8:a9:00:1e:f2:bc:82:e8:dc:7a:d9:89:d0:e7:5f:9d:02:e1:
         55:22:36:0c:07:59:84:d1:b8:32:7c:b1:6c:23:da:e9:53:2f:
         77:52:57:bf:08:e8:f5:81:2d:37:fa:5e:81:8f:18:4c:4d:5d:
         db:d9:9d:bc:e0:86:27:0e:af:cb:f3:0e:bb:9c:57:23:18:57:
         bd:cd:27:29:01:9a:53:a9:c0:f9:82:b8:3b:a1:5f:59:b5:45:
         9f:8f:08:67:4a:92:40:46:89:1f:33:5f:ea:6e:07:68:eb:45:
         8c:54:a0:dc:7c:0a:22:ab:b2:bf:00:7f:6a:81:6f:09:5a:59:
         04:9c:37:f5:42:c2:78:8f:74:76:d3:19:1b:2e:b4:52:b7:31:
         65:a3:19:05:8d:6a:d9:21:5e:c2:b0:83:5c:cf:2b:f3:db:ea:
         20:59:5b:84:f2:e0:a9:74:20:96:19:cc:1e:bb:56:f5:71:b4:
         05:95:85:ee:d9:3d:ee:45:1f:c0:7d:29:86:52:d6:ed:db:ed:
         de:54:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:50 2026 by rpki-client